This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen. If you enable this policy setting, the PC's network connectivity state cannot be changed without signing into Windows. If you disable or don't configure this policy setting, any user can disconnect the PC from the network or can connect the PC to other available networks without signing into Windows. Vulnerability: Disabling or not configuring this setting can compromise security as it may allow a malicious agent to disconnect the device from the current network or connect the device to other networks without needing to log on to Windows. Counter Measure: Enable and configure this setting. Potential Impact: Users will need to log on to Windows with their device each time they want to disconnect from the current network or connect to another one. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesSystemLogonDo not display network selection UI (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSystem!DontDisplayNetworkSelectionUI

[enable/disable]

(1) GPO: Computer Configuration\Administrative Templates\System\Logon\Do not display network selection UI (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!DontDisplayNetworkSelectionUI